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(54) Protection scheme for a communications network under multiple failures 



(57) A system and method for implementing a 
shared protection scheme under a scenario of multiple 
failures in an optical network. In one embodiment of the 
invention, a working path between an ingress node and 
an egress node is computed responsive to a connection 



request received in the network. One or more backup 
paths are computed between the ingress and egress 
nodes, which are activatable upon a failure condition as- 
sociated with the working path orthe backup paths. The 
backup paths may be based on link and/or node disjoint- 
edness, as well as resource-based cost constraints. 
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Description 

BACKGROUND OF THE INVENTION 

Technical Field of the Invention 

[0001] The present invention generally relates to tel- 
econnnnunications and data comnnunications networks, 
More particularly, and not by way of any linnitation, the 
present Invention Is directed to a protection schennefor 
such networks under multiple failures. 

Description of Related Art 

[0002] A network operator typically takes into consid- 
eration nnultiple objectives when routing traffic through 
a network. One objective may be to minimize cost. An- 
other objective may be to minimize transmission impair- 
ments. A third objective may be to maximize the possi- 
bility that the network can be restored using a backup 
path In the event of a failure thereof. 
[0003] Generally, there are three types of restoration 
schemes: dedicated restoration, shared restoration, 
and best effort restoration. In dedicated restoration, the 
capacity of a protection, or restoration, path is reserved 
for an individual demand. In shared restoration, the res- 
toration capacity is reserved, but shared across multiple 
demands. In best effort restoration, no reservation is 
made and restoration capacity is allocated in real time 
on an as-available basis. The first two classes of resto- 
ration both have guaranteed restoration in the event of 
a single failure; however, they differ in restoration time, 
as shared restoration requires real-time path setup. 
[0004] Whereas intelligent mesh routing techniques 
have been available for computing a backup path in a 
1 :N or IVliN shared restoration scheme, such techniques 
tend to be inadequate where multiple failures are en- 
countered in a network. Further, known protection path 
implementations do not address the issue of correlated 
multiple failures, especially in the context of applicable 
network resource constraints. 

SUMMARY OF THE INVENTiON 

[0005] Accordingly, the present invention advanta- 
geously provides a system and method for implement- 
ing a shared protection scheme under a scenario of mul- 
tiple failures in a network. In one aspect, the present 
invention is directed to a method for providing protection 
in a communications network including a plurality of 
nodes coupled by communication links. The method 
commences by computing a working path between an 
ingress node and an egress node responsive to a con- 
nection request received in the network. One or more 
backup paths are computed between the ingress and 
egress nodes, which are activatable upon a failure con- 
dition associated with the working path or the backup 
paths. The backup paths may be based on link and/or 



node disjointedness, as well as resource-based cost 
constraints in an exemplary implementation. Setup 
messages regarding the working path and the backup 
paths are then transmitted to the nodes spanning the 

5 paths. In one exemplary embodiment, the backup paths 
are computed using a methodology wherein the links 
between two backup paths or between a backup path 
and the working path are completely disjointed. In an- 
other exemplary embodiment, the backup and working 

10 paths may be partially disjoint in tenn of the links. In a 
further exemplary embodiment, both links as well as 
nodes may be completely or partially disjoint between 
the working path and backup paths. As a further varia- 
tion, the backup path implementation may be activated 

15 based on network quality, wherein nodal and/or link 
quality degradation may be monitored for determining a 
failure condition arising out of temporal or spatial corre- 
lation of degradation events. 

[0006] In another aspect, the present invention is di- 
20 rected to a system for providing protection in a commu- 
nications network including a plurality of nodes coupled 
by communication links. A structure is provided for com- 
puting a working path between a ingress node and an 
egress node responsive to a connection request re- 
25 ceived by the ingress node. Another structure is includ- 
ed for computing one or more backup paths between 
the ingress and egress nodes, wherein each of the back- 
up paths is activatable upon a failure condition associ- 
ated with at least one of the working path and the backup 
30 paths. A control structure is responsible for transmitting 
messages to nodes in the network for setting up the 
working path and backup paths. Byway of implementa- 
tion, these structures may be embodied in software, 
hardware, or any combination thereof, and may be as- 
35 sociated with a network node or distributed In the net- 
work. 

BRIEF DESCRiPTiON OF THE DRAWINGS 

40 [0007] Amorecompleteunderstandingof the present 
invention may be had by reference to the following De- 
tailed Description when taken in conjunction with the ac- 
companying drawings wherein: 

45 FIG. 1 depicts an exemplary optical transport net- 
work wherein a protection scheme involving multi- 
ple backup paths may be implemented in accord- 
ance with the teachings of the present invention; 

50 FIG. 2 depicts an embodiment of an exemplary op- 
tical network node; 

FIGS. 3 A and 3B depict exemplary database por- 
tions for effectuating multiple backup paths in ac- 
55 cordance with one embodiment of the present in- 
vention; 

FIG. 4 is a flow chart of an embodiment of a method 
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of the present invention for implennenting a protec- 
tion sclieme capable of withstanding multiple fail- 
ures; 

FIGS. 5A-5E illustrate different topological stages 
of an exennplary network wherein nnultiple backup 
paths may be computed in accordance with the 
teachings of the present invention; 

FIG. 6 is a flow chart of an embodiment of a method 

of the present invention for computing multiple 
backup paths where the links are completely dis- 
joint; 

FIG. 7 is a flow chart of an embodiment of a method 

of the present invention for computing multiple 
backup paths where the links and nodes are com- 
pletely disjoint; 

FIG. 8 is a flow chart of an embodiment of a method 

of the present invention for computing multiple 
backup paths where the links are partially disjoint; 

FIG. 9 is a flow chart of an embodiment of a method 
of the present invention for computing multiple 
backup paths where the links and nodes are partial- 
ly disjoint; 

FIG. 1 0 is a flow chart of an embodiment of a meth- 
od of the present invention for implementing a mul- 
tiple backup path scheme based on network quality; 
and 

FIGS. 1 1 Aand 11 B depict two graphs that exemplify 
simulation results relating to the teachings of the 
present invention. 

DETAILED DESCRIPTION OF THE DRAWINGS 

[0008] In the drawings, like or similar elements are 
designated with identical reference numerals through- 
out the several views thereof, and the various elements 
depicted are not necessarily drawn to scale. Referring 
now in particularto FIG, 1 , depicted therein is an exem- 
plary optical transport network 1 00 wherein a protection 
scheme involving multiple backup paths may be imple- 
mented in accordance with the teachings of the present 
invention. The optical transport network 1 00, which may 
be implemented as a generalized multi-protocol label 
switched (GMPLS) optical transport network, includes 
a plurality of nodes or network elements 102A through 
1 02F coupled by optical links 1 04. An optical link 1 04 is 
effectuated as a fiber carrying information between two 
nodes; for example, between Node A i02A and Node 
D 1 02D. The optical fiber is operable to carry information 
over a number of wavelengths or "channels", effectuat- 
ed by means of such well-known techniques as wave- 
length division multiplexing (WDM) or dense WDM 



(DWDM), wherein different channels of information are 
modulated using respective frequencies or wave- 
lengths, The number of wavelengths, N, is dependent 
on implementation and may be different for each fiber. 
5 [0009] As the optical links 1 04 are unidirectional, typ- 
ically a pair of links are disposed between any two ad- 
jacent nodes in order to facilitate bidirectional transport 
therebetween, each node receiving information on one 
link and transmitting information on the other link. It will 
be apparent that for purposes of illustration only one link 
is shown in FIG. 1 , it being understood that at least one 
link in each direction would normally be used in an actual 
implementation. When information is received by an 
edge node (i.e., an ingress node) of the transport net- 
work 1 00, a path is computed between the ingress node 
and the destination node from which the information is 
to exit the transport network (i.e., the egress node). 
Thus, a path may be treated as a sequential concate- 
nation of a number of links spanning between the in- 
gress and egress nodes. By way of convention, a path 
may be designated as string of nodes disposed between 
the originating and destination nodes. For instance, the 
ordered sequence {A, D,C,F} designates a path between 
Node A as the ingress node and Node F as the egress 
node, Nodes D and C being intermediary nodes. 
[0010] A "connection" is a data transmission event 
over a path and is determined by a start time and a du- 
ration time. The connection may use different channels 
over different links. For example, a connection between 
Node A 102A and Node E 102E may use path {A,D,E} 
wherein the information is passed from Node A to Node 
D over one wavelength (q) and is passed from Node D 
to Node E over another wavelength (q). 
[0011] Several techniques are available for comput- 
ing end-to-end (ETE) paths in the optical transport net- 
work 1 00 based on a variety of criteria, e.g., hop count, 
link costs, et cetera. A network administrator and man- 
ager (NAM) 1 08 may be disposed centrally or distributed 
over one or more nodes of the transport network 100. A 
quality monitor (QM) 110 provided with the NAM func- 
tionality 108 is operable to monitor the various network 
components, e.g., nodes and links, and apply suitable 
criteria to determine if a node or link will experience deg- 
radation (i.e,, a failure). In one implementation, the 
NAM/QM functionality may be co-located as an admin- 
istrative node 106 on the network operable to monitor 
the various network components, i.e., nodes and links, 
and take appropriate actions with respect to path selec- 
tion, switching, and restoration. As will be seen in detail 
hereinbelow, the NAM/QM integrated functionality is al- 
so capable of ascertaining spatial and temporal corre- 
lations among multiple failures that may afflict the net- 
work and accordingly effectuate one or more protective 
backup paths using the methodologies of the present 
invention. 

[0012] FIG. 2 depicts a block diagram of an embodi- 
ment of an exemplary optical network node 200. A rout- 
ing part 202 including routing protocol Iogic202, a global 
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data base 206 and control logic 208, is coupled to an 
optical CrossConnect (OXC) module 21 0 which includes 
a switching matrix 212 disposed between one or more 
input demultiplexers (DEMUXes) and one or more out- 
put DEMUXes. In general operation, router 202 is re- 
sponsible for control signaling in the network in which 
the node 200 is disposed, e.g., the optical transport net- 
work 1 00 shown in FIG. 1 , using appropriate routing log- 
ic 204. The global database 206 comprises one or more 
tables that provide a cun^ent topology of the network 1 00 
for intelligent, dynamic creation of network paths under 
control of control logic 208. Preferably, in one implemen- 
tation, the global database 206 provides information re- 
garding each channel of each link in the entire network 
domain. Status of each channel can be one of the fol- 
lowing: (i) channel is used in a working path; (ii) channel 
is used in a protection or backup path, but not available 
for sharing; (iii) channel is used in a backup path and is 
available for sharing; and (iv) channel is not used for 
either working or protection paths. Further, where the 
NAM/QM functionality is distributed over network 
nodes, the global database may also include quality in- 
formation relating to the network components. 
[0013] The OXC module 210 is responsible for pass- 
ing information from a channel on an incoming fiber to 
a channel on an outgoing fiber using the switching ma- 
trix 212. By way of example, two incoming fibers 21 4A 
and 21 4D and two outgoing fibers 21 4B and 21 4C are 
shown. Reference numerals 21 6A and 21 6D refer to a 
pair of DEMUXes operable to separate the incoming 
channels 218 and 222 {Ci^ through \J^) associated with 
the incoming fiber 21 4A and 21 4D, respectively, before 
being passed to the switching matrix 212. The switching 
matric 212 passes each incoming channel to an outgo- 
ing channel 220 as may be defined by a local database 
228. A pair of MUXes 216B and 214C operate to multi- 
plex the outgoing channels 220 and 224 for transmis- 
sion onto fibers 21 4B and 214C respectively. Whereas 
the same number of wavelengths (i.e., optical channels 
through 1^^) are shown for both incoming and outgo- 
ing links, different implementations are possible. Fur- 
ther, a regenerator module 226 may be used for cou- 
pling channels with different wavelengths. 
[0014] Continuing to refer to FIG. 2, global database 
206 includes information for determining the existence 
of links having channels currently used for protection 
paths, where the channels can be shared with other pro- 
tection paths, and links having channels that are cur- 
rently unused by either working paths or protection 
paths. Whereas itshouldbe apparentthat the global da- 
tabase 206 may be implemented in a variety of forms, 
FIGS. 3A and 3B depict two exemplary database por- 
tions for effectuating multiple backup paths in accord- 
ance with one embodiment of the present invention. As 
shown in FIG. 3A, a global shared protection table 300A 
contains entries for each channel in each link that is 
used for path protection. In the illustrated embodiment, 
each channel is identified by the link and channel 



number fields. If there are multiple fibers between two 
nodes, each channel could be identified by link, fiber 
and channel number within the fiber. The working path 
(s) associated with the channel are identified in the ap- 

5 propriate Working Path field which is set forth as a 
{NODES} field that lists all nodes on that Working Path. 
[0015] A global link allocation table 300B is shown in 
FIG. 3B, which maintains a record of the status of all 
channels for all links in the network domain. Again, each 

10 channel on each of the links is identified by link and 
channel number (and, optionally, fiber number) fields. A 
Status field identifies the channel as being "Shared", "In 
Use" or "Available". "Shared" status is employed when 
a channel is currently used in a path, e.g., for a protec- 

15 tion path, that could be used for shared protection. "In 
Use" identifies channels used for working paths. Fur- 
ther, "In Use" status may also be applied for protection 
paths for which shared protection is not to be used. By 
way of illustration, for a high quality class of service, a 

20 working path may not be used using I-1-I protection, 
where sharing of the protect channels is not allowed. 
Finally, "Available" identifies channels that not currently 
used for protection or working paths. 
[0016] In operation, every exemplary network node 

25 200 maintains the entries in the global allocation data- 
base for its own links. Information regarding other links 
in the global allocation database may be compiled from 
allocation information provided by other nodes in the 
network domain. In one implementation, such informa- 

30 tion may be shared among all nodes in the network us- 
ing a variant of the Open Shortest Path First (OSPF) 
protocol upgraded for optical networks. Further, protec- 
tion messages for updating the nodal global allocation 
database may be transmitted using the Label Distribu- 

35 tion Protocol (LDP) messages. By way of example, the 
protection messages may be the same as those used 
for reservation of a working path, with the addition of two 
fields: (1) a Type field that indicates whether the con- 
nection is for a protection path or a working path; and 

40 (2) a Working Path field that identifies whether the work- 
ing path needs a backup protection path. 
[0017] In a presently preferred exemplary embodi- 
ment of the present invention, the protection path selec- 
tion is performed at the source node (i.e., ingress node), 

^5 as is the working path selection. FIG. 4 Is a flow chart 
of an embodiment of a method of the present invention 
for implementing a protection scheme capable of with- 
standing multiple failures. When a connection request 
is received at an ingress node (step 402), a working path 

50 is computed based on the network topology acquired 
from the co-located global database or from a central- 
ized administrative node (step 404). The working path 
may be calculated using a number of various well- 
known techniques. An exemplary embodiment is provid- 
es ed in the following co-pending commonly-owned U.S. 
patent application entitled " Informed Dynamic Path 
Protection For Optical Networks," filed 1 1/29/2001 , Ap- 
plication Number 09/998,362, cross-referenced herein- 
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above and incorporated by herein. Thereafter, one or 
more backup paths are connputed using one of several 
methodologies set forth in detail below for purposes of 
providing protection against multiple failures (step 406). 
As will be seen, these methodologies vary depending 
upon link disjointedness, node disjointedness, and cost 
factors associated with spatial/temporal correlations 
among failures. Once the working path and multiple 
backup path computations are completed, appropriate 
setup and/or activation messages may be transmitted 
from the source node to the path nodes of the network 
(step 408). Again, additional details concerning mes- 
sage transmission and wavelength assignment process 
may be found in the cross-referenced U .S. patent appli- 
cation identified above. 

[0018] FIGS. 5A-5E illustrate different topological 
stages of an exemplary network 500 wherein multiple 
backup paths may be computed in accordance with the 
teachings of the present invention depending on linkdis- 
jointedness and/or node disjointedness. Network 500 
comprises five nodes, A through F, wherein an exem- 
plary working path from Node A to Node F is identified 
as Path {A,D,C,F}, denoted by reference numeral 502. 
In a complete link disjoint scheme, successive path 
computations involve network topologies wherein the 
links that make up previously computed paths are logi- 
cally removed from the topology. On the other hand, in 
partial link disjoint scheme, there may be some link com- 
monality between a new path and a previously comput- 
ed path, the degree of commonality depending upon 
certain cost/penalty constraints associated with sharing 
or non-sharing of protection links. FIGS. 5B through 5D 
depict three topologies that obtain with respect to the 
exemplary network 500 when a complete link disjoint 
scheme is used for calculating multiple backup paths. 
In these FIGURES, previously computed paths are il- 
lustrated as having links with wavy lines, which are log- 
ically removed from the network topology for calculating 
subsequent paths. After removing the exemplary work- 
ing path 502 from the network topology (i.e., links AD, 
DC and OF are shown in wavy lines), a first protection 
path is computed using any known algorithm. For pur- 
poses of illustration, a protection path 504 is shown in 
a dashed line between the source node (Node A) and 
the destination node (Node F), using links AB and BF. 
Thereafter, if the requested connection session be- 
tween nodes A and F warranted more than one backup, 
another iteration of a protection path computation takes 
place. As shown in FIG. 50, links AB and BF are also 
removed from the network topology for this calculation 
(i.e., AB and BF links areshown in wavy lines). Asecond 
protection path between Node A and Node F is comput- 
ed, again using any known or heretofore unknown algo- 
rithm, after removing all previously calculated links from 
the topological graph. Reference numeral 506 refers to 
the exemplary second protection path comprising links 
AC and OF. Upon removal of these newly calculated 
links, the network graph results in a topology that will 



not permit any further paths between the source and 
destination nodes (FIG. 5D). 

[0019] FIG. 5E depicts the exemplary network topol- 
ogy in a complete node disjoint scenario. As can be 
5 readily appreciated, the network topology graph shrinks 
even more rapidly in this scenario due to the fact that 
when a previously used node (either in a working path 
or in a backup path) is logically removed from the graph, 
all links associated with that node are also removed. 
10 Clearly, the end nodes, i.e., the source and destination 
nodes, are not deleted from the subsequent path calcu- 
lations. Accordingly, upon removal of the intermediary 
nodes 0 and D (as illustrated by the dashed circles 
around them) from the graph, all links associated there- 
15 with are also removed, leaving only nodes A, B, E and 
F Again, a protection path may be calculated within the 
resulting graph using any technique, e.g., Dijkstra's 
Shortest Path First (SPF) algorithm. Reference numeral 
508 refers to an exemplary backup path involving links 
20 AB and BF, as illustrated by the dashed line segments. 
[0020] It should be appreciated that a diverse set of 
backup paths can provide better protection against mul- 
tiple failure events in the network. For instance, in the 
example of a working path being protected by two back- 
25 up paths, the probability of failure is intuitively low, as 
even after the failure of the working path and one of the 
protection paths it is still possible to restore the connec- 
tion between the end nodes. A single backup path may 
also provide protection against multiple failures as long 
30 as the failures do not affect the working and protection 
paths simultaneously. Accordingly, having multiple 
backup paths advantageously decreases the probability 
of simultaneous interruption of all backups. Moreover 
the overall benefits of multiple backup paths are clearly 
35 related to spatial and temporal distributions of the fail- 
ures as well as the selected methodology for computing 
backup paths. 

[0021] FIG. 6 is a flow chart of an embodiment of a 
method of the present invention for computing multiple 
40 backup paths where the links are completely disjoint. 
First, a network topology is acquired (step 602), wherein 
all links in the network topology may be attributed the 
same cost. Thereafter, a working path is computed pur- 
suant to a connection request between a pair of end-to- 
45 end (ETE) nodes, i.e., the source and destination nodes 
(step 604). As noted in the foregoing discussion, any 
known or heretofore unknown routing technique may be 
employed that optimizes a suitable metric (e.g., hop 
count, path distance, et cetera). Working path links are 
50 then logically removed from the network topology (step 
606) so as to ensure that they are not reused for sub- 
sequent paths. One or more backup paths between the 
ETE nodes may then be calculated in a similar fashion 
until the requisite number of paths are computed or the 
55 resultant topology does not sustain any more backups 
(step 608). 

[0022] If no additional ETE pairs are to be evaluated 
as well (decision block 61 0), the process flow then stops 
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(step 620). Otherwise, operations similar to tliose de- 
scribed above are carried out (steps 612,61 4, 61 6 and 
618) to compute multiple backup paths that are com- 
pletely link disjoint. The process flow may continue until 
no more ETE pairs are left. 

[0023] In another embodiment, path computations 
may be predicated upon treating both links as well as 
nodes as completely disjoint. FIG. 7 is a flow chart of an 
embodiment of a method of the present invention for 
computing multiple backup paths where the links and 
nodes are completely disjoint. Similar to the process set 
forth above, a network topology is acquired first by an 
ingress node of an ETE pair (step 702). Again, all links 
in the network topology may be attributed the same cost 
using an appropriate metric. Aworking path is computed 
thereafter pursuant to a connection request between the 
ingress and egress nodes of the ETE pair (step 704). 
[0024] Both working path links and working path 
nodes are then logically removed from the network to- 
pology (step 706) so as to ensure that they are not re- 
used for subsequent paths. As explained before, a path 
node is removed by removing all the links connected to 
it. Clearly, the source and destination nodes are not re- 
moved from these computations. Subsequently, one or 
more backup paths between the ETE nodes may then 
be calculated in a similar fashion until the requisite 
number of paths are computed orthe resultant topology 
does not sustain any more backups (step 708). 
[0025] If no additional ETE pairs are to be evaluated 
as well (decision block 71 0), the process flow then stops 
(step 720). Otherwise, operations similar to those de- 
scribed above are carried out (steps 712, 714, 71 6 and 
718) to compute multiple backup paths that are com- 
pletely link-disjoint as well as node-disjoint. The process 
flow may continue until no more ETE pairs are left. 
[0026] Because of resource constraints and connec- 
tivity blocking in a network, it may not be feasible to treat 
the links, nodes, or both, in a completely disjointed fash- 
ion for calculating the backup paths. A variable cost fac- 
tor may be employed to penalize the links and/or nodes 
already used for a connection. FIG. 8 is a flow chart of 
an embodiment of a method of the present invention for 
computing multiple backup paths where the links are 
partially disjoint. Upon obtaining the network topology 
(step 802), prior-use penalty costs (0^) associated with 
the network links may be initialized (step 804). A working 
path is then computed for the ingress and egress node 
pair associated with the connection request (step 806). 
Subsequent multiple backup paths are computed there- 
after by successively updating the link penalty costs af- 
ter each backup path calculation (step 808). As a result, 
the methodology attempts to avoid the links that have 
already been used in a working path connection or a 
backup connection. The backup paths, therefore, are 
the destination paths calculated with the new metric that 
is cost-aware for each iterative step. These steps may 
be repeated until the number of backup paths requested 
is reached or when the network topology no longer sus- 



tains any additional backup paths between the ETE 
node pair (decision block 810). If additional ETE node 
pairs are available that require path computations, the 
working path and backup paths may be computed by 

5 utilizing the process flow set forth above, wherein link 
penalty costs are properly taken into account for each 
pair and each path computation (step 812). 
[0027] As a further variation, both links as well as 
nodes may be treated as partially disjoint. Again, it 

10 should be noted that whereas the partial-disjoint ap- 
proach may provide a more dynamic and diverse pro- 
tection scheme for a given topology (although the work- 
ing and backup paths may not be disjoint end-to-end), 
network resources may be constrained enough that at 

15 least certain level of optimization is necessary with re- 
spect to the shared resources. In order to optimize re- 
source sharing, another cost parameter (avoidance 
cost, C2) can be introduced that quantifies the penalties 
associated with not sharing a linker node in the network. 

20 FIG. 9 is a flow chart of an embodiment of a method of 
the present invention for computing multiple backup 
paths where the links and/or nodes are partially disjoint 
and avoidance costs are also included. Similar to the 
methodology set forth above, prior-use penalty costs 

25 (0^) as well as sharing avoidance costs (C2) associated 
with the network resources are initialized (step 904) up- 
on acquiring the network's topology (step 902) pursuant 
to a connection request. Aworking path is then comput- 
ed for the ingress and egress node pair associated with 

30 the connection request (step 906). A new metric (C) 
based on a mathematical relationship between G-, and 
C2 (e.g., C = 0^*02) may be used for optimizing path 
computations. Thereafter, subsequent multiple backup 
paths are computed by successively updating one or 

35 both costs after each backup path calculation (step 
908). As a result, the methodology not only attempts to 
avoid, to a partial degree, the links and nodes that have 
already been used in a working path or a backup path, 
but also involves computing of paths after taking into 

40 consideration various costs that penalize avoidance of 
resource sharing. These steps may be repeated until a 
predetermined number of backup paths is reached or 
when the network topology no longer sustains any ad- 
ditional backup paths between the ETE node pair (de- 

45 cision block 91 0). If additional ETE node pairs are avail- 
able that require path computations, the working path 
and backup paths may be computed by utilizing the 
process flow set forth above, wherein link/node prior use 
penalty costs and resource-sharing avoidance costs are 

50 properly taken into account for each pair and each path 
computation (step 912). 

[0028] As a further improvement, the multiple backup 
path computation schemes set forth above may be pro- 
vided with the capability so as to be dynamically invoked 
55 based on network quality, which in turn may depend up- 
on spatial and/or temporal correlation (s) of failures, e. 
g., a link or nodal degradation event. For instance, a 
centralized or distributed entity (e.g., QM 110 associat- 
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ed with administrator node 106 shown in FIG. 1) may 
continuously or periodically or otherwise monitor the 
quality of network components and upon occurrence of 
a particular condition, a suitable multiple backup path 
technique may be activated to compute one or more 
backup paths. Referring now to FIG. 10, shown therein 
is a flow chart of an embodiment of a method of the 
present invention for implementing a multiple backup 
path scheme based on temporal and spatial correlation 
of degradation events that gives rise to a failure condi- 
tion. As alluded to previously, a network quality manager 
is operable to monitor the quality of network compo- 
nents, e.g., nodes, links, et cetera (step 1002). Each 
component may be given a quality rating. For instance, 
a link could be given a rating with respect to an appro- 
priate quality variable that is parameterized between 1 
and 1 0. If the signal quality through that link is degraded 
or otherwise affected, or ifthequality parameter is below 
a certain threshold, that condition exemplifies a "degra- 
dation event" in the network. After detecting the first oc- 
currence of such an event (step 1 004), temporal and/or 
spatial correlation of further quality degradation events 
is monitored with respect to the first event (step 1006). 
In one embodiment, a timer may be started with a dura- 
tion in the order of a minute and all the subsequent deg- 
radations occurring on other links during the same time 
window may be used for defining a Shared Risk Link 
Group (SRLG). In other words, links that exhibit simul- 
taneous degradation are more likely to fail at about the 
same time; which can help in early detection of multiple 
failures. To reduce the possibility of multiple failures, 
however, two links belonging to the same SRLG are not 
used for the same lightpath connection (i.e., spatial di- 
versification). Once a degradation correlation profile is 
determined, an appropriate multiple backup path com- 
putation scheme (e.g., the complete link disjoint meth- 
odology) may be used to compute a predetermined 
number of backup paths based on failure prediction. 
[0029] FIGS. 11 A and 11 B depict two graphs that ex- 
emplify simulation results relating to the partial link dis- 
joint scheme provided in accordance with teachings of 
the present invention. In particular, FIG. 11 A shows the 
recovery performance afforded by multiple backup 
paths in the context of link failures. Reference numeral 
1 1 02 refers to the percentage recovery of an exemplary 
network under a single partial link disjoint backup path 
as a function of the number of failures. Likewise, refer- 
ence numerals 1 1 04 and 1 1 06 refer to the recovery per- 
centages of the network under two and three backup 
paths, respectively. As can be seen, with up to two fail- 
ures, there is no substantial improvement seen among 
the three different backup path regimes. However, when 
the number of failures increases, the two- and three- 
backup path regimes provide up to 21% improvement 
in the recovery performance of the exemplary network. 
Additionally, as the number of failures reaches 10, all 
three regimes yield poor results, each with less than 
20% recovery. 



[0030] FIG. 1 1 B depicts the recovery performance of 
three partial link disjoint backup regimes in the context 
of nodal failures. For a single node failure, the partial 
link disjoint scheme achieves about 60% recovery with 
5 three backup paths, as exemplified by curve 1 1 1 2. This 
is about a 20% improvement over the performance af- 
forded by a single backup path regime (curve 1 1 08). Un- 
der a two-backup path regime, the recovery perform- 
ance is about 50% for a single nodal failure (curve 1110). 
10 As with the link failures, when the number of nodal fail- 
ures increases, the recovery performance of the three 
variants of the backup path scheme becomes degraded 
in a substantially similar fashion. 
[0031] Based upon the foregoing Detailed Descrip- 
15 tion, it should be readily apparent that the present in- 
vention advantageously provides a scheme for imple- 
menting shared protection under a scenario of multiple 
failures in an optical network. It is believed that the op- 
eration and construction of the present invention will be 
20 apparent from the foregoing Detailed Description. While 
the exemplary embodiments of the invention shown and 
described have been characterized as being preferred, 
it should be readily understood that various changes 
and modifications could be madetherein without depart- 
25 ing from the scope of the present invention as set forth 
in the following claims. 

Claims 

30 

1. A method for providing protection in a communica- 
tions network including a plurality of nodes coupled 
by communication links, comprising: 

35 responsive to a connection request received by 

an ingress node, computing a working path be- 
tween said ingress node and an egress node; 
computing a plurality of backup paths between 
said ingress and egress nodes, each of said 
40 backup paths being activatable upon a failure 

condition associated with at least one of said 
working path and one of said backup paths; and 
transmitting messages to nodes spanning said 
working path and backup paths for setting up 
45 said working path and backup paths. 

2. The method for providing protection in a communi- 
cations network including a plurality of nodes cou- 
pled by communication links as set forth in claim 1 , 

50 wherein said working path between said ingress 
node and said egress node is computed based on 
a Shortest Path First (SPF) algorithm. 

3. The method for providing protection in a communi- 
55 cations network including a plurality of nodes cou- 
pled by communication links as set forth in claim 1 , 
wherein said backup paths are computed recursive- 
ly until a predetermined number of backup paths is 
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reached with respect to said worl<ing path. 

4. The method for providing protection in a communi- 
cations network including a plurality of nodes cou- 
pled by communication linl<s as set forth in claim 1 , 
wherein said backup paths comprise paths that are 
completely link-disjointed with respect to one anoth- 
er. 

5. The method for providing protection in a communi- 
cations network including a plurality of nodes cou- 
pled by communication links as set forth in claim 1 , 
wherein said backup paths comprise paths that are 
partially link-disjointed with respect to one another. 

6. A network element disposed as an ingress node in 
an optical network formed from a plurality of nodes 
that are inter-coupled via optical communication 
links, said ingress node including a processor-ac- 
cessible medium having a plurality of instructions 
for carrying out network operations, comprising: 



1 0. The network element as set forth in claim 6, wherein 
said instructions for computing said backup paths 
include instructions operable to determine multiple 
backup paths using a methodology in which said 

5 backup paths are partially node-disjointed with re- 
spectto one another but for said ingress and egress 
nodes. 

11. The network element as set forth in claim 6, wherein 
10 said instructions for computing said backup paths 

include instructions operable to determine multiple 
backup paths using a methodology in which said 
backup paths are partially link-disjointed with re- 
spect to one another. 

15 

12. The network element as set forth in claim 6, wherein 
said instructions for computing said backup paths 
and said working path include instructions operable 
to calculate paths based on a cost parameter asso- 

20 ciated with said communication links, said cost pa- 
rameter operating to penalize communication links 
that disallow sharing of paths. 

13. The network element as set forth in claim 6, wherein 
said instructions for computing said backup paths 
and said working path include instructions operable 
to calculate paths based on a prior-use cost param- 
eter associated with said communication links, said 
prior-use cost parameter operating to penalize 
communication links that are already used. 



instructions for computing a working path be- 
tween said ingress node and an egress node, 
said instructions operating responsive to a con- 25 
nection request received by said ingress node; 
instructions for computing a plurality of backup 
paths between said ingress and egress nodes, 
each of said backup paths being activatable up- 
on a failure condition associated with at least 30 
one of said working path and one of said back- 
up paths; and 

instructions for transmitting messages to nodes 
spanning said working path and backup paths 
for setting up said working path and backup 35 
paths. 



7. The network element as set forth in claim 6, wherein 
said instructions forcomputing said working path in- 
clude instructions for determining a working path 40 
between said ingress node and said egress node 
based on a shortest path first algorithm. 

8. The network element as setforth in claim 6, wherein 
said Instructions for computing said backup paths 45 
include instructions operable to determine multiple 
backup paths using a methodology in which said 
backup paths are completely link-disjointed with re- 
spect to one another. 

50 

9. The network element as setforth in claim 6, wherein 
said instructions for computing said backup paths 
include instructions operable to determine multiple 
backup paths using a methodology in which said 
backup paths are completely node-disjointed with 55 
respect to one another but for said ingress and 
egress nodes. 
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